FCP_FMG_AD-7.6 practice questions 21–30

1. Question 21 · 62 in bank

   Refer to the exhibit.

   

   An administrator added a FortiGate device to FortiManager with the default object settings at the ADOM layer. What can you conclude from the import policy package process of the HQ-NGFW- 1 device?

   • AThe administrator must select Per Platform for all interfaces to correctly detect all interfaces from HQ-NGFW-1.
   • BThe administrator must manually create the port4 interface on the ADOM layer to avoid import policy errors.
   • CFortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer.
   • DFortiGate may not work as expected when the administrator does not import all objects.

   Show answer

   Answer: C

   Next question

2. Question 22 · 62 in bank

   An administrator must create a policy and install it on a FortiGate device within an ADOM in backup mode. How can the administrator perform this task?

   • AUse the Install Wizard located on the device manager.
   • BEnable workflow mode to allow policy creation and approval.
   • CMake sure the ADOM and FortiGate firmware versions match and use the ADOM policy package.
   • DUse a FortiManager script to apply the configuration changes.

   Show answer

   Answer: D

   Next question

3. Question 23 · 62 in bank

   Refer to the exhibits.

   

   

   

   An administrator needs to push a FortiToken Mobile to assign it to HR_user in the HQ-NGFW-1. However, when installing the policy package, they receive the following error message:

   

   Why is the administrator not able to install the FortiToken on the HQ-NGFW-1 firewall?

   • AThe administrator must use a user local meta field to assign FortiToken.
   • BThe administrator must use a valid FortiToken that exists on HQ-NGFW-1.
   • CThe administrator must use a metadata variable to assign the same FortiToken to multiple users in FortiManager.
   • DThe administrator must use per-device mapping to assign the FortiToken to HQ-NGFW-1.

   Show answer

   Answer: B

   Next question

4. Question 24 · 62 in bank

   Select 2

   Refer to the exhibit.

   

   Which two statements about the output are true? (Choose two.)

   • AThe latest revision history for the managed FortiGate does not match the device-level database.
   • BConfiguration changes have been installed on FortiGate, updating policy and device-level database.
   • CThe latest revision history for the managed FortiGate does match the FortiManager policy database.
   • DThe system template default will override device-level database configurations.

   Show answer

   Answer: CD

   Next question

5. Question 25 · 62 in bank

   Refer to the exhibits.

   

   

   An administrator has been asked to install the same policies from a central policy package onto the BR1-FGT-1 firewall. The administrator added BR1-FGT-1 as a target in the central policy package installation. What should the administrator do when reinstalling the central policy package on the BR1-FGT-1 firewall?

   • AAssign only one policy package to the firewall because FortiManager does not allow more than one policy package assigned per device at the same time.
   • BImport the policy package to change the unknown status and synchronize the policy package.
   • CUse the install wizard to install the central policy package on the BR1-FGT-1 firewall.
   • DFirst resolve the modified status in the configuration and provisioning templates to allow a smooth installation.

   Show answer

   Answer: C

   Next question

6. Question 26 · 62 in bank

   After correcting a policy package configuration issue, you want to prevent administrators from repeating the mistake that caused the issue. Which FortiManager approach best meets this need?

   • AConfigure an TCL script to run locally on FortiManager for each FortiGate.
   • BRestrict administrators with an administration profile from viewing the revision history to limit who can make changes.
   • CEnable the change note to require administrators to add a note whenever they change object configurations.
   • DEnable a workflow requiring approval before installing policy packages on any FortiGate.

   Show answer

   Answer: D

   Next question

7. Question 27 · 62 in bank

   Which output is displayed right after moving the ISFW device from one ADOM to another?

   • A//IMG//
   • B//IMG//
   • C//IMG//
   • D//IMG//

   Show answer

   Answer: D

   Next question

8. Question 28 · 62 in bank

   A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM. How can the customer administrator edit the global header policy of the global policy package?

   • AThe customer administrator can edit the header policy by using workspace mode on the global ADOM.
   • BThe customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
   • CThe service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.
   • DThe customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.

   Show answer

   Answer: D

   Next question

9. Question 29 · 62 in bank

   Refer to the exhibit.

   

   What can you conclude from the downloaded import report?

   • AFortiManager does not support per-device mapping for firewall addresses.
   • BThe administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database.
   • CortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate.
   • DAs a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

   Show answer

   Answer: B

   Next question

10. Question 30 · 62 in bank

    An administrator is copying a system template profile between ADOMs by running the following command: execute fmprofile export-profile ADOM 3547 /tmp/Backup_File output dump to file: [/tmp/Backup_File] Where does this command export the system template profile from?

    • AFortiManager /tmp/Backup_File folder
    • BFortiManager ADOM policy database
    • CADOM device database
    • DFortiManager configuration backup file

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.6 practice, question 21. 62 questions available.